pegasusssap[.]com

PhishDestroy has identified pegasusssap.com as a high-risk generic phishing domain targeting cryptocurrency users. The site impersonates PegasusSwap, a crypto exchange platform, to trick visitors into entering sensitive information or connecting wallets. With an elevated risk level, this domain was designed to drain digital assets from unsuspecting victims. Fortunately, the site has been taken offline, but the threat remains as copycat domains may appear.

Technical analysis reveals several red flags. The domain was registered on February 21, 2026, through NiceNIC International Group Co., Limited, a registrar often associated with malicious sites. It resolves to IP 188.114.96.3 and uses an SSL certificate from Google Trust Services (WE1). VirusTotal flagged it with 2 out of 95 security vendors marking it as malicious, and it appears on one security blocklist. These indicators, combined with its short lifespan and suspicious registration details, confirm its fraudulent nature.

To stay safe, users should avoid visiting any domains impersonating PegasusSwap or similar crypto platforms. Always verify URLs by checking official sources and use PhishDestroy to scan suspicious links. Never enter private keys or seed phrases on third-party sites. If you have already interacted with pegasusssap.com, revoke any wallet permissions immediately and monitor accounts for unauthorized transactions. Report any related phishing attempts to relevant authorities and community channels.